PT-2025-45918 · Julia · Ffmpeg Jll

Published 2025-10-19 · Updated 2025-10-19

OSV

FFmpeg v.n6.1-3-g466799d4f5 allows an attacker to trigger use of a parameter of negative size in the av samples set silence function in thelibavutil/samplefmt.c:260:9 component.

Related Identifiers

JLSEC-2025-128

Affected Products

Ffmpeg Jll

References · 9

• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN · Vendor Advisory
• https://osv.dev/vulnerability/JLSEC-2025-128 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT · Vendor Advisory
• https://github.com/FFmpeg/FFmpeg/commit/b1942734c7cbcdc9034034373abcc9ecb9644c47 · Note
• https://trac.ffmpeg.org/ticket/10700 · Note